Analysis of php session security issues_PHP tutorial

Therefore, our main solution is to verify the validity of the session ID.
The following is the quoted content:

Copy the code The code is as follows:

if(!isset($_SESSION['user_agent'])){
$_SESSION['user_agent'] =$_SERVER['REMOTE_ADDR'].$_SERVER[ 'HTTP_USER_AGENT'];
}
/* If the user session ID is fake*/
elseif ($_SESSION['user_agent'] != $_SERVER['REMOTE_ADDR'] .$_SERVER['HTTP_USER_AGENT' ]) {
session_regenerate_id();
}
?>

http://www.bkjia.com/PHPjc/323634.htmlwww.bkjia.comtruehttp: //www.bkjia.com/PHPjc/323634.htmlTechArticle Therefore, our main solution is to verify the validity of the session ID. The following is the quoted content: Copy code code As follows: ?php if(!isset($_SESSION['user_agent'])){ $_SESSION['user_a...